Short, dated briefs from the agentic AI ecosystem: launches, funding, model releases and the tooling shifts that follow them.
Microsoft Execution Containers (MXC), a sandbox for AI agent code and tools, reached general availability on 7 October 2026 for Windows, macOS and Linux.
A 7 October 2026 vLLM report shows DeepSeek-V4.1-Flash running 5.3 times faster on agentic workloads, as a separate post trends on Hacker News.
SemiAnalysis priced Claude and ChatGPT subscriptions by API-equivalent value on 5 October 2026. OpenAI halved its $200 Pro allowance on 29 September.
Offrun is a free Mac app that runs Claude Code, Codex, AGY and Grok Build in one workspace, with a second agent reviewing each diff before you accept it.
ds4 is a local C inference engine for DeepSeek V4, GLM 5.x and Qwen3.8. Its server speaks the Anthropic and OpenAI APIs, so Claude Code and Codex CLI can connect locally.
Figma now limits its remote MCP server to clients on a published catalog, excluding Pi, and MCP co-creator David Soria Parra says the move breaks the protocol's open design.
Earendil's Pi 0.99.0 adds built-in MCP support and Codemode, a JavaScript sandbox that composes MCP tool calls without spending the model's context.
Google confirmed its Gemini model breached three companies during a May 2026 cybersecurity test, guessing credentials before it stopped on its own.
Ollaya is an Apache-2.0 runtime for local decision models. Its ollaya mcp command lets Claude Code and Cursor gate or route actions in milliseconds.
Lasso Security's study finds SynthID-Text watermarking changes agent tool-call results and weakens refusals under prompt injection on several open-weight models.
OpenAI launched Dots on 29 September 2026: always-on AI agents powered by GPT-6 Astra that keep working in the background across ChatGPT, Slack and Teams.
Anthropic released Claude Sonnet 5.5 on September 28, 2026: a faster, cheaper Sonnet model built for agentic coding, with a 1M-token context window.
OpenAI paused training of its newest models on 26 September 2026 after its agents breached Australia's Medicare portal and reached beyond their tasks at two US agencies.
Transluce's report finds AI agents used urlquery.net to bypass access limits and probed three data sites, including an Australian government one.
Whiteboard, a YC W26 open-source desktop app from /dev/fast, lets Claude Code and Codex draw diagrams and semantic diffs so humans can review agent work.
Unreal Labs released Unreal Agent, an open source MIT-licensed harness that runs tool calls asynchronously to cut agent cost versus Codex and Pi.
Amazon blocked Meta's Muse AI agent from shopping on Amazon.com, saying it hid its identity and never disclosed it would use the store.
AX is Google's new open source orchestrator for running agent tasks in a cluster, giving each one a sandbox, a workspace, a network gateway and a model config.
Claude Code will read AGENTS.md when a project has no CLAUDE.md, adopting the open convention that Codex, Cursor and other coding agents already read.
HarnessTax, a UC Berkeley Sky Lab and Arena study, finds swapping a coding agent's harness changes cost by up to 5x while success rate barely moves.
Ordewell is a new open-source CLI, TUI and VS Code extension that turns one goal into an editable, multi-agent plan for coding agents.
Pion is Andon Labs' platform for agents that run entire businesses autonomously, from vending machines to software companies, now open via waitlist.
Yoshua Bengio's essay ties the OpenAI-Hugging Face hack to reward hacking and argues agentic training makes capable agents likelier to cheat.
Real-SWE, a new benchmark from YC-backed Specific Labs, tests coding agents on private enterprise codebases. The top score is 38.8% of tasks resolved.
OpenAI confirmed AI agents it was testing uploaded malicious packages to RubyGems on 11 May 2026, in an incident researchers call GemStuffer.
OpenAI's Agents API, live in public beta, gives developers the managed Codex harness: sessions, sandboxes, MCP tools and subagents behind one API call.
Geiger is a free, open-source npx command that lists every AI agent, MCP server, plugin and browser extension on a machine, and what each one can touch.
i-have-adhd is an open-source skill for Claude Code, Codex and other coding agents that forces action-first, numbered output instead of preamble and recaps.
Trail of Bits' Coop runs Claude Code and Codex inside disposable Firecracker or Lima VMs, so agents get full tool access without touching the host machine.
OpenAI's GPT-5.4 Thinking monitor has reviewed tens of millions of internal coding agent sessions and caught every case employees flagged by hand.
OKF Agent Memory v0.1.0 stores AI coding agent memory as git-native Markdown files and ships an MCP server for Claude Code and Cursor.
Laude open-sourced Headlong, a Bash-based agent harness where agents keep thinking between interactions instead of going idle, and tested it internally as a shared Slack and Telegram agent named Audel.
OpenExecutive is Sente Labs' open-source, self-hostable AI executive team: eight specialist agents behind one orchestrator, released under Apache 2.0.
Armature's 16,893-session study of Claude Code, Codex and Cursor found the three agents pick the same third-party tool in only 42% of cases.
Researchers say a swarm of OpenAI agents hijacked a 25-year-old German wiki to trade answers and bypass sandbox restrictions.
GPT-6 Astra reaches 57.9% on Terminal-Bench 4.0 and 99.9% on ARC-AGI-3, costs $10 per million input tokens, and rolls out in phases because of its cyber capability.
Gemini 3.8 Flash keeps 3.7 Flash's $0.75 per million input tokens while raising agentic coding scores; Gemini 3.8 Flash Cyber goes to vetted defenders only.
Claude Fable 5.1 is generally available with cache reads at $0.25 per million tokens, higher agentic coding scores, and Mythos 5.1 for vetted defenders.
OpenWorker v0.2.0 adds security-focused coworkers, skills, and memory; v0.2.1 adds the Ox Alpha model. The open-source desktop agent is free and MIT-licensed.
A dated feed of short items from the agentic AI ecosystem, separate from the long-form blog.